194.67.116.225📋 Copy

# IP Intelligence Briefing: 194.67.116.225/32

Classification: Moderate Risk | Date: 2026-07-27

---

## Executive Summary

IP address 194.67.116.225 presents a moderate risk profile (risk score: 40) with ownership attributed to Pavel Arbuzov under RIPE-allocated block 194.67.96.0/19. The IP resolves to cloud hosting infrastructure (regruhosting.ru) and currently exhibits no active threat indicators. DNSBL listing on 2 of 8 monitors warrants monitoring but does not indicate immediate threat.

---

## Technical Profile

Network Registration:

• ASN: 197695 (Pavel Arbuzov)
• Network Name: RU-REGRU-940712
• RIR: RIPE
• CIDR Block: 194.67.96.0/19
• Abuse Contact: Available via RDAP

Geolocation:

• Country: Russia (RU)
• Coordinates: 61.52°N, 105.32°E (5000km accuracy radius)
• GeoSource Count: 1
• Consensus: Confirmed

Network Role:

• Infrastructure Type: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None detected
• Provider/CDN/VPN/Proxy: All false

Route Analysis:

• BGP Prefix: 194.67.116.0/24
• Origin ASN: 197695
• AS Path: 6939 → 12389 → 199599 → 197695
• Route Changes (30d): 1
• Route Stability: False (transient routing)

---

## DNS Intelligence

PTR Record: 194-67-116-225.cloudvps.regruhosting.ru

Forward Resolution: Confirmed

Hosted Domain: regruhosting.ru

Domain Count: 0 additional domains

Email Authentication:

• SPF: Present
• DMARC: Not configured
• TXT Records: 0

---

## Threat Indicators

Current Status:

• Blacklist Count: 0
• Pulsedive Risk: Not available
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Known Campaigns: None

Threat Persistence:

• Threat Observation Count: 0
• Persistently Malicious: False
• Threat Persistence Days: 0

---

## Neighborhood Analysis

Subnet: 194.67.116.225/24

• Abuse Density: 0 (clean)
• Classification: Clean
• Inherited Risk: 0
• Total Siblings: 1
• Active/Threat Siblings: 0

No neighboring IPs in the /24 subnet exhibit threat characteristics.

---

## Historical Observations

Total Signals: 21 observations recorded

Most Recent: 2026-07-27 13:46:47 UTC

Signal History:

• Geolocation: Russia (confidence: 52%)
• Network Classification: Non-residential, non-cloud, non-proxy (confidence: 30%)
• Ownership: Pavel Arbuzov (confidence: 90%)
• Subnet Classification: Clean (confidence: 40%)

No ownership changes detected. Threat persistence indicates stable, non-malicious operation over observation period.

---

## Related Entities

DNS Associations:

• 194-67-116-225.cloudvps.regruhosting.ru (regruhosting.ru)
• Same network: RU-REGRU-940712

Campaign Correlation:

• Cert Matches: 0
• Banner Matches: 0
• Correlated IPs: 0
• Certificate Subjects: 0

---

## Recommended Actions

Current Risk Level: Moderate (40/100)

Action Priority: Monitor

Recommended Mitigations:

1. Monitor DNSBL listings on remaining 6 monitors

2. Verify legitimate use of regruhosting.ru cloud VPS infrastructure

3. Confirm business justification for Russian-registered infrastructure

4. Review firewall rules for cloud VPS hosting patterns

5. No immediate blocking recommended absent positive threat indicators

Firewall Considerations:

• IP not currently requiring block due to absence of active threat indicators
• Monitor for changes in service patterns or DNSBL additions
• Route stability issues may indicate transient hosting arrangements

---

Report Generated: IPDebrief Intelligence Platform

Classification: Defensive Security Intelligence

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.